linux/drivers/nfc/port100.c
<<
>>
Prefs
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * Sony NFC Port-100 Series driver
   4 * Copyright (c) 2013, Intel Corporation.
   5 *
   6 * Partly based/Inspired by Stephen Tiedemann's nfcpy
   7 */
   8
   9#include <linux/module.h>
  10#include <linux/usb.h>
  11#include <net/nfc/digital.h>
  12
  13#define VERSION "0.1"
  14
  15#define SONY_VENDOR_ID          0x054c
  16#define RCS380S_PRODUCT_ID      0x06c1
  17#define RCS380P_PRODUCT_ID      0x06c3
  18
  19#define PORT100_PROTOCOLS (NFC_PROTO_JEWEL_MASK    | \
  20                           NFC_PROTO_MIFARE_MASK   | \
  21                           NFC_PROTO_FELICA_MASK   | \
  22                           NFC_PROTO_NFC_DEP_MASK  | \
  23                           NFC_PROTO_ISO14443_MASK | \
  24                           NFC_PROTO_ISO14443_B_MASK)
  25
  26#define PORT100_CAPABILITIES (NFC_DIGITAL_DRV_CAPS_IN_CRC | \
  27                              NFC_DIGITAL_DRV_CAPS_TG_CRC)
  28
  29/* Standard port100 frame definitions */
  30#define PORT100_FRAME_HEADER_LEN (sizeof(struct port100_frame) \
  31                                  + 2) /* data[0] CC, data[1] SCC */
  32#define PORT100_FRAME_TAIL_LEN 2 /* data[len] DCS, data[len + 1] postamble*/
  33
  34#define PORT100_COMM_RF_HEAD_MAX_LEN (sizeof(struct port100_tg_comm_rf_cmd))
  35
  36/*
  37 * Max extended frame payload len, excluding CC and SCC
  38 * which are already in PORT100_FRAME_HEADER_LEN.
  39 */
  40#define PORT100_FRAME_MAX_PAYLOAD_LEN 1001
  41
  42#define PORT100_FRAME_ACK_SIZE 6 /* Preamble (1), SoPC (2), ACK Code (2),
  43                                    Postamble (1) */
  44static u8 ack_frame[PORT100_FRAME_ACK_SIZE] = {
  45        0x00, 0x00, 0xff, 0x00, 0xff, 0x00
  46};
  47
  48#define PORT100_FRAME_CHECKSUM(f) (f->data[le16_to_cpu(f->datalen)])
  49#define PORT100_FRAME_POSTAMBLE(f) (f->data[le16_to_cpu(f->datalen) + 1])
  50
  51/* start of frame */
  52#define PORT100_FRAME_SOF       0x00FF
  53#define PORT100_FRAME_EXT       0xFFFF
  54#define PORT100_FRAME_ACK       0x00FF
  55
  56/* Port-100 command: in or out */
  57#define PORT100_FRAME_DIRECTION(f) (f->data[0]) /* CC */
  58#define PORT100_FRAME_DIR_OUT 0xD6
  59#define PORT100_FRAME_DIR_IN  0xD7
  60
  61/* Port-100 sub-command */
  62#define PORT100_FRAME_CMD(f) (f->data[1]) /* SCC */
  63
  64#define PORT100_CMD_GET_FIRMWARE_VERSION 0x20
  65#define PORT100_CMD_GET_COMMAND_TYPE     0x28
  66#define PORT100_CMD_SET_COMMAND_TYPE     0x2A
  67
  68#define PORT100_CMD_IN_SET_RF       0x00
  69#define PORT100_CMD_IN_SET_PROTOCOL 0x02
  70#define PORT100_CMD_IN_COMM_RF      0x04
  71
  72#define PORT100_CMD_TG_SET_RF       0x40
  73#define PORT100_CMD_TG_SET_PROTOCOL 0x42
  74#define PORT100_CMD_TG_SET_RF_OFF   0x46
  75#define PORT100_CMD_TG_COMM_RF      0x48
  76
  77#define PORT100_CMD_SWITCH_RF       0x06
  78
  79#define PORT100_CMD_RESPONSE(cmd) (cmd + 1)
  80
  81#define PORT100_CMD_TYPE_IS_SUPPORTED(mask, cmd_type) \
  82        ((mask) & (0x01 << (cmd_type)))
  83#define PORT100_CMD_TYPE_0      0
  84#define PORT100_CMD_TYPE_1      1
  85
  86#define PORT100_CMD_STATUS_OK      0x00
  87#define PORT100_CMD_STATUS_TIMEOUT 0x80
  88
  89#define PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK 0x01
  90#define PORT100_MDAA_TGT_WAS_ACTIVATED_MASK      0x02
  91
  92struct port100;
  93
  94typedef void (*port100_send_async_complete_t)(struct port100 *dev, void *arg,
  95                                              struct sk_buff *resp);
  96
  97/*
  98 * Setting sets structure for in_set_rf command
  99 *
 100 * @in_*_set_number: Represent the entry indexes in the port-100 RF Base Table.
 101 *              This table contains multiple RF setting sets required for RF
 102 *              communication.
 103 *
 104 * @in_*_comm_type: Theses fields set the communication type to be used.
 105 */
 106struct port100_in_rf_setting {
 107        u8 in_send_set_number;
 108        u8 in_send_comm_type;
 109        u8 in_recv_set_number;
 110        u8 in_recv_comm_type;
 111} __packed;
 112
 113#define PORT100_COMM_TYPE_IN_212F 0x01
 114#define PORT100_COMM_TYPE_IN_424F 0x02
 115#define PORT100_COMM_TYPE_IN_106A 0x03
 116#define PORT100_COMM_TYPE_IN_106B 0x07
 117
 118static const struct port100_in_rf_setting in_rf_settings[] = {
 119        [NFC_DIGITAL_RF_TECH_212F] = {
 120                .in_send_set_number = 1,
 121                .in_send_comm_type  = PORT100_COMM_TYPE_IN_212F,
 122                .in_recv_set_number = 15,
 123                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_212F,
 124        },
 125        [NFC_DIGITAL_RF_TECH_424F] = {
 126                .in_send_set_number = 1,
 127                .in_send_comm_type  = PORT100_COMM_TYPE_IN_424F,
 128                .in_recv_set_number = 15,
 129                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_424F,
 130        },
 131        [NFC_DIGITAL_RF_TECH_106A] = {
 132                .in_send_set_number = 2,
 133                .in_send_comm_type  = PORT100_COMM_TYPE_IN_106A,
 134                .in_recv_set_number = 15,
 135                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106A,
 136        },
 137        [NFC_DIGITAL_RF_TECH_106B] = {
 138                .in_send_set_number = 3,
 139                .in_send_comm_type  = PORT100_COMM_TYPE_IN_106B,
 140                .in_recv_set_number = 15,
 141                .in_recv_comm_type  = PORT100_COMM_TYPE_IN_106B,
 142        },
 143        /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
 144        [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
 145};
 146
 147/**
 148 * struct port100_tg_rf_setting - Setting sets structure for tg_set_rf command
 149 *
 150 * @tg_set_number: Represents the entry index in the port-100 RF Base Table.
 151 *                 This table contains multiple RF setting sets required for RF
 152 *                 communication. this field is used for both send and receive
 153 *                 settings.
 154 *
 155 * @tg_comm_type: Sets the communication type to be used to send and receive
 156 *                data.
 157 */
 158struct port100_tg_rf_setting {
 159        u8 tg_set_number;
 160        u8 tg_comm_type;
 161} __packed;
 162
 163#define PORT100_COMM_TYPE_TG_106A 0x0B
 164#define PORT100_COMM_TYPE_TG_212F 0x0C
 165#define PORT100_COMM_TYPE_TG_424F 0x0D
 166
 167static const struct port100_tg_rf_setting tg_rf_settings[] = {
 168        [NFC_DIGITAL_RF_TECH_106A] = {
 169                .tg_set_number = 8,
 170                .tg_comm_type = PORT100_COMM_TYPE_TG_106A,
 171        },
 172        [NFC_DIGITAL_RF_TECH_212F] = {
 173                .tg_set_number = 8,
 174                .tg_comm_type = PORT100_COMM_TYPE_TG_212F,
 175        },
 176        [NFC_DIGITAL_RF_TECH_424F] = {
 177                .tg_set_number = 8,
 178                .tg_comm_type = PORT100_COMM_TYPE_TG_424F,
 179        },
 180        /* Ensures the array has NFC_DIGITAL_RF_TECH_LAST elements */
 181        [NFC_DIGITAL_RF_TECH_LAST] = { 0 },
 182
 183};
 184
 185#define PORT100_IN_PROT_INITIAL_GUARD_TIME      0x00
 186#define PORT100_IN_PROT_ADD_CRC                 0x01
 187#define PORT100_IN_PROT_CHECK_CRC               0x02
 188#define PORT100_IN_PROT_MULTI_CARD              0x03
 189#define PORT100_IN_PROT_ADD_PARITY              0x04
 190#define PORT100_IN_PROT_CHECK_PARITY            0x05
 191#define PORT100_IN_PROT_BITWISE_AC_RECV_MODE    0x06
 192#define PORT100_IN_PROT_VALID_BIT_NUMBER        0x07
 193#define PORT100_IN_PROT_CRYPTO1                 0x08
 194#define PORT100_IN_PROT_ADD_SOF                 0x09
 195#define PORT100_IN_PROT_CHECK_SOF               0x0A
 196#define PORT100_IN_PROT_ADD_EOF                 0x0B
 197#define PORT100_IN_PROT_CHECK_EOF               0x0C
 198#define PORT100_IN_PROT_DEAF_TIME               0x0E
 199#define PORT100_IN_PROT_CRM                     0x0F
 200#define PORT100_IN_PROT_CRM_MIN_LEN             0x10
 201#define PORT100_IN_PROT_T1_TAG_FRAME            0x11
 202#define PORT100_IN_PROT_RFCA                    0x12
 203#define PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR 0x13
 204#define PORT100_IN_PROT_END                     0x14
 205
 206#define PORT100_IN_MAX_NUM_PROTOCOLS            19
 207
 208#define PORT100_TG_PROT_TU           0x00
 209#define PORT100_TG_PROT_RF_OFF       0x01
 210#define PORT100_TG_PROT_CRM          0x02
 211#define PORT100_TG_PROT_END          0x03
 212
 213#define PORT100_TG_MAX_NUM_PROTOCOLS 3
 214
 215struct port100_protocol {
 216        u8 number;
 217        u8 value;
 218} __packed;
 219
 220static const struct port100_protocol
 221in_protocols[][PORT100_IN_MAX_NUM_PROTOCOLS + 1] = {
 222        [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
 223                { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 224                { PORT100_IN_PROT_ADD_CRC,                 0 },
 225                { PORT100_IN_PROT_CHECK_CRC,               0 },
 226                { PORT100_IN_PROT_MULTI_CARD,              0 },
 227                { PORT100_IN_PROT_ADD_PARITY,              0 },
 228                { PORT100_IN_PROT_CHECK_PARITY,            1 },
 229                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 230                { PORT100_IN_PROT_VALID_BIT_NUMBER,        7 },
 231                { PORT100_IN_PROT_CRYPTO1,                 0 },
 232                { PORT100_IN_PROT_ADD_SOF,                 0 },
 233                { PORT100_IN_PROT_CHECK_SOF,               0 },
 234                { PORT100_IN_PROT_ADD_EOF,                 0 },
 235                { PORT100_IN_PROT_CHECK_EOF,               0 },
 236                { PORT100_IN_PROT_DEAF_TIME,               4 },
 237                { PORT100_IN_PROT_CRM,                     0 },
 238                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 239                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 240                { PORT100_IN_PROT_RFCA,                    0 },
 241                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 242                { PORT100_IN_PROT_END,                     0 },
 243        },
 244        [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
 245                { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 246                { PORT100_IN_PROT_ADD_CRC,                 0 },
 247                { PORT100_IN_PROT_CHECK_CRC,               0 },
 248                { PORT100_IN_PROT_MULTI_CARD,              0 },
 249                { PORT100_IN_PROT_ADD_PARITY,              1 },
 250                { PORT100_IN_PROT_CHECK_PARITY,            1 },
 251                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 252                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 253                { PORT100_IN_PROT_CRYPTO1,                 0 },
 254                { PORT100_IN_PROT_ADD_SOF,                 0 },
 255                { PORT100_IN_PROT_CHECK_SOF,               0 },
 256                { PORT100_IN_PROT_ADD_EOF,                 0 },
 257                { PORT100_IN_PROT_CHECK_EOF,               0 },
 258                { PORT100_IN_PROT_DEAF_TIME,               4 },
 259                { PORT100_IN_PROT_CRM,                     0 },
 260                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 261                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 262                { PORT100_IN_PROT_RFCA,                    0 },
 263                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 264                { PORT100_IN_PROT_END,                     0 },
 265        },
 266        [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
 267                { PORT100_IN_PROT_INITIAL_GUARD_TIME,      6 },
 268                { PORT100_IN_PROT_ADD_CRC,                 1 },
 269                { PORT100_IN_PROT_CHECK_CRC,               1 },
 270                { PORT100_IN_PROT_MULTI_CARD,              0 },
 271                { PORT100_IN_PROT_ADD_PARITY,              1 },
 272                { PORT100_IN_PROT_CHECK_PARITY,            1 },
 273                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 274                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 275                { PORT100_IN_PROT_CRYPTO1,                 0 },
 276                { PORT100_IN_PROT_ADD_SOF,                 0 },
 277                { PORT100_IN_PROT_CHECK_SOF,               0 },
 278                { PORT100_IN_PROT_ADD_EOF,                 0 },
 279                { PORT100_IN_PROT_CHECK_EOF,               0 },
 280                { PORT100_IN_PROT_DEAF_TIME,               4 },
 281                { PORT100_IN_PROT_CRM,                     0 },
 282                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 283                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 284                { PORT100_IN_PROT_RFCA,                    0 },
 285                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 286                { PORT100_IN_PROT_END,                     0 },
 287        },
 288        [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
 289                /* nfc_digital_framing_nfca_short */
 290                { PORT100_IN_PROT_ADD_CRC,          2 },
 291                { PORT100_IN_PROT_CHECK_CRC,        2 },
 292                { PORT100_IN_PROT_VALID_BIT_NUMBER, 8 },
 293                { PORT100_IN_PROT_T1_TAG_FRAME,     2 },
 294                { PORT100_IN_PROT_END,              0 },
 295        },
 296        [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
 297                /* nfc_digital_framing_nfca_standard */
 298                { PORT100_IN_PROT_ADD_CRC,   1 },
 299                { PORT100_IN_PROT_CHECK_CRC, 0 },
 300                { PORT100_IN_PROT_END,       0 },
 301        },
 302        [NFC_DIGITAL_FRAMING_NFCA_T4T] = {
 303                /* nfc_digital_framing_nfca_standard_with_crc_a */
 304                { PORT100_IN_PROT_END,       0 },
 305        },
 306        [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
 307                /* nfc_digital_framing_nfca_standard */
 308                { PORT100_IN_PROT_END, 0 },
 309        },
 310        [NFC_DIGITAL_FRAMING_NFCF] = {
 311                { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
 312                { PORT100_IN_PROT_ADD_CRC,                 1 },
 313                { PORT100_IN_PROT_CHECK_CRC,               1 },
 314                { PORT100_IN_PROT_MULTI_CARD,              0 },
 315                { PORT100_IN_PROT_ADD_PARITY,              0 },
 316                { PORT100_IN_PROT_CHECK_PARITY,            0 },
 317                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 318                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 319                { PORT100_IN_PROT_CRYPTO1,                 0 },
 320                { PORT100_IN_PROT_ADD_SOF,                 0 },
 321                { PORT100_IN_PROT_CHECK_SOF,               0 },
 322                { PORT100_IN_PROT_ADD_EOF,                 0 },
 323                { PORT100_IN_PROT_CHECK_EOF,               0 },
 324                { PORT100_IN_PROT_DEAF_TIME,               4 },
 325                { PORT100_IN_PROT_CRM,                     0 },
 326                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 327                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 328                { PORT100_IN_PROT_RFCA,                    0 },
 329                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 330                { PORT100_IN_PROT_END,                     0 },
 331        },
 332        [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
 333                /* nfc_digital_framing_nfcf */
 334                { PORT100_IN_PROT_END, 0 },
 335        },
 336        [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
 337                /* nfc_digital_framing_nfcf */
 338                { PORT100_IN_PROT_INITIAL_GUARD_TIME,     18 },
 339                { PORT100_IN_PROT_ADD_CRC,                 1 },
 340                { PORT100_IN_PROT_CHECK_CRC,               1 },
 341                { PORT100_IN_PROT_MULTI_CARD,              0 },
 342                { PORT100_IN_PROT_ADD_PARITY,              0 },
 343                { PORT100_IN_PROT_CHECK_PARITY,            0 },
 344                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 345                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 346                { PORT100_IN_PROT_CRYPTO1,                 0 },
 347                { PORT100_IN_PROT_ADD_SOF,                 0 },
 348                { PORT100_IN_PROT_CHECK_SOF,               0 },
 349                { PORT100_IN_PROT_ADD_EOF,                 0 },
 350                { PORT100_IN_PROT_CHECK_EOF,               0 },
 351                { PORT100_IN_PROT_DEAF_TIME,               4 },
 352                { PORT100_IN_PROT_CRM,                     0 },
 353                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 354                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 355                { PORT100_IN_PROT_RFCA,                    0 },
 356                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 357                { PORT100_IN_PROT_END,                     0 },
 358        },
 359        [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
 360                { PORT100_IN_PROT_END, 0 },
 361        },
 362        [NFC_DIGITAL_FRAMING_NFCB] = {
 363                { PORT100_IN_PROT_INITIAL_GUARD_TIME,     20 },
 364                { PORT100_IN_PROT_ADD_CRC,                 1 },
 365                { PORT100_IN_PROT_CHECK_CRC,               1 },
 366                { PORT100_IN_PROT_MULTI_CARD,              0 },
 367                { PORT100_IN_PROT_ADD_PARITY,              0 },
 368                { PORT100_IN_PROT_CHECK_PARITY,            0 },
 369                { PORT100_IN_PROT_BITWISE_AC_RECV_MODE,    0 },
 370                { PORT100_IN_PROT_VALID_BIT_NUMBER,        8 },
 371                { PORT100_IN_PROT_CRYPTO1,                 0 },
 372                { PORT100_IN_PROT_ADD_SOF,                 1 },
 373                { PORT100_IN_PROT_CHECK_SOF,               1 },
 374                { PORT100_IN_PROT_ADD_EOF,                 1 },
 375                { PORT100_IN_PROT_CHECK_EOF,               1 },
 376                { PORT100_IN_PROT_DEAF_TIME,               4 },
 377                { PORT100_IN_PROT_CRM,                     0 },
 378                { PORT100_IN_PROT_CRM_MIN_LEN,             0 },
 379                { PORT100_IN_PROT_T1_TAG_FRAME,            0 },
 380                { PORT100_IN_PROT_RFCA,                    0 },
 381                { PORT100_IN_PROT_GUARD_TIME_AT_INITIATOR, 6 },
 382                { PORT100_IN_PROT_END,                     0 },
 383        },
 384        [NFC_DIGITAL_FRAMING_NFCB_T4T] = {
 385                /* nfc_digital_framing_nfcb */
 386                { PORT100_IN_PROT_END,                     0 },
 387        },
 388        /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
 389        [NFC_DIGITAL_FRAMING_LAST] = {
 390                { PORT100_IN_PROT_END, 0 },
 391        },
 392};
 393
 394static const struct port100_protocol
 395tg_protocols[][PORT100_TG_MAX_NUM_PROTOCOLS + 1] = {
 396        [NFC_DIGITAL_FRAMING_NFCA_SHORT] = {
 397                { PORT100_TG_PROT_END, 0 },
 398        },
 399        [NFC_DIGITAL_FRAMING_NFCA_STANDARD] = {
 400                { PORT100_TG_PROT_END, 0 },
 401        },
 402        [NFC_DIGITAL_FRAMING_NFCA_STANDARD_WITH_CRC_A] = {
 403                { PORT100_TG_PROT_END, 0 },
 404        },
 405        [NFC_DIGITAL_FRAMING_NFCA_T1T] = {
 406                { PORT100_TG_PROT_END, 0 },
 407        },
 408        [NFC_DIGITAL_FRAMING_NFCA_T2T] = {
 409                { PORT100_TG_PROT_END, 0 },
 410        },
 411        [NFC_DIGITAL_FRAMING_NFCA_NFC_DEP] = {
 412                { PORT100_TG_PROT_TU,     1 },
 413                { PORT100_TG_PROT_RF_OFF, 0 },
 414                { PORT100_TG_PROT_CRM,    7 },
 415                { PORT100_TG_PROT_END,    0 },
 416        },
 417        [NFC_DIGITAL_FRAMING_NFCF] = {
 418                { PORT100_TG_PROT_END, 0 },
 419        },
 420        [NFC_DIGITAL_FRAMING_NFCF_T3T] = {
 421                { PORT100_TG_PROT_END, 0 },
 422        },
 423        [NFC_DIGITAL_FRAMING_NFCF_NFC_DEP] = {
 424                { PORT100_TG_PROT_TU,     1 },
 425                { PORT100_TG_PROT_RF_OFF, 0 },
 426                { PORT100_TG_PROT_CRM,    7 },
 427                { PORT100_TG_PROT_END,    0 },
 428        },
 429        [NFC_DIGITAL_FRAMING_NFC_DEP_ACTIVATED] = {
 430                { PORT100_TG_PROT_RF_OFF, 1 },
 431                { PORT100_TG_PROT_END,    0 },
 432        },
 433        /* Ensures the array has NFC_DIGITAL_FRAMING_LAST elements */
 434        [NFC_DIGITAL_FRAMING_LAST] = {
 435                { PORT100_TG_PROT_END,    0 },
 436        },
 437};
 438
 439struct port100 {
 440        struct nfc_digital_dev *nfc_digital_dev;
 441
 442        int skb_headroom;
 443        int skb_tailroom;
 444
 445        struct usb_device *udev;
 446        struct usb_interface *interface;
 447
 448        struct urb *out_urb;
 449        struct urb *in_urb;
 450
 451        /* This mutex protects the out_urb and avoids to submit a new command
 452         * through port100_send_frame_async() while the previous one is being
 453         * canceled through port100_abort_cmd().
 454         */
 455        struct mutex out_urb_lock;
 456
 457        struct work_struct cmd_complete_work;
 458
 459        u8 cmd_type;
 460
 461        /* The digital stack serializes commands to be sent. There is no need
 462         * for any queuing/locking mechanism at driver level.
 463         */
 464        struct port100_cmd *cmd;
 465
 466        bool cmd_cancel;
 467        struct completion cmd_cancel_done;
 468};
 469
 470struct port100_cmd {
 471        u8 code;
 472        int status;
 473        struct sk_buff *req;
 474        struct sk_buff *resp;
 475        int resp_len;
 476        port100_send_async_complete_t  complete_cb;
 477        void *complete_cb_context;
 478};
 479
 480struct port100_frame {
 481        u8 preamble;
 482        __be16 start_frame;
 483        __be16 extended_frame;
 484        __le16 datalen;
 485        u8 datalen_checksum;
 486        u8 data[];
 487} __packed;
 488
 489struct port100_ack_frame {
 490        u8 preamble;
 491        __be16 start_frame;
 492        __be16 ack_frame;
 493        u8 postambule;
 494} __packed;
 495
 496struct port100_cb_arg {
 497        nfc_digital_cmd_complete_t complete_cb;
 498        void *complete_arg;
 499        u8 mdaa;
 500};
 501
 502struct port100_tg_comm_rf_cmd {
 503        __le16 guard_time;
 504        __le16 send_timeout;
 505        u8 mdaa;
 506        u8 nfca_param[6];
 507        u8 nfcf_param[18];
 508        u8 mf_halted;
 509        u8 arae_flag;
 510        __le16 recv_timeout;
 511        u8 data[];
 512} __packed;
 513
 514struct port100_tg_comm_rf_res {
 515        u8 comm_type;
 516        u8 ar_status;
 517        u8 target_activated;
 518        __le32 status;
 519        u8 data[];
 520} __packed;
 521
 522/* The rule: value + checksum = 0 */
 523static inline u8 port100_checksum(u16 value)
 524{
 525        return ~(((u8 *)&value)[0] + ((u8 *)&value)[1]) + 1;
 526}
 527
 528/* The rule: sum(data elements) + checksum = 0 */
 529static u8 port100_data_checksum(const u8 *data, int datalen)
 530{
 531        u8 sum = 0;
 532        int i;
 533
 534        for (i = 0; i < datalen; i++)
 535                sum += data[i];
 536
 537        return port100_checksum(sum);
 538}
 539
 540static void port100_tx_frame_init(void *_frame, u8 cmd_code)
 541{
 542        struct port100_frame *frame = _frame;
 543
 544        frame->preamble = 0;
 545        frame->start_frame = cpu_to_be16(PORT100_FRAME_SOF);
 546        frame->extended_frame = cpu_to_be16(PORT100_FRAME_EXT);
 547        PORT100_FRAME_DIRECTION(frame) = PORT100_FRAME_DIR_OUT;
 548        PORT100_FRAME_CMD(frame) = cmd_code;
 549        frame->datalen = cpu_to_le16(2);
 550}
 551
 552static void port100_tx_frame_finish(void *_frame)
 553{
 554        struct port100_frame *frame = _frame;
 555
 556        frame->datalen_checksum = port100_checksum(le16_to_cpu(frame->datalen));
 557
 558        PORT100_FRAME_CHECKSUM(frame) =
 559                port100_data_checksum(frame->data, le16_to_cpu(frame->datalen));
 560
 561        PORT100_FRAME_POSTAMBLE(frame) = 0;
 562}
 563
 564static void port100_tx_update_payload_len(void *_frame, int len)
 565{
 566        struct port100_frame *frame = _frame;
 567
 568        le16_add_cpu(&frame->datalen, len);
 569}
 570
 571static bool port100_rx_frame_is_valid(const void *_frame)
 572{
 573        u8 checksum;
 574        const struct port100_frame *frame = _frame;
 575
 576        if (frame->start_frame != cpu_to_be16(PORT100_FRAME_SOF) ||
 577            frame->extended_frame != cpu_to_be16(PORT100_FRAME_EXT))
 578                return false;
 579
 580        checksum = port100_checksum(le16_to_cpu(frame->datalen));
 581        if (checksum != frame->datalen_checksum)
 582                return false;
 583
 584        checksum = port100_data_checksum(frame->data,
 585                                         le16_to_cpu(frame->datalen));
 586        if (checksum != PORT100_FRAME_CHECKSUM(frame))
 587                return false;
 588
 589        return true;
 590}
 591
 592static bool port100_rx_frame_is_ack(const struct port100_ack_frame *frame)
 593{
 594        return (frame->start_frame == cpu_to_be16(PORT100_FRAME_SOF) &&
 595                frame->ack_frame == cpu_to_be16(PORT100_FRAME_ACK));
 596}
 597
 598static inline int port100_rx_frame_size(const void *frame)
 599{
 600        const struct port100_frame *f = frame;
 601
 602        return sizeof(struct port100_frame) + le16_to_cpu(f->datalen) +
 603               PORT100_FRAME_TAIL_LEN;
 604}
 605
 606static bool port100_rx_frame_is_cmd_response(const struct port100 *dev,
 607                                             const void *frame)
 608{
 609        const struct port100_frame *f = frame;
 610
 611        return (PORT100_FRAME_CMD(f) == PORT100_CMD_RESPONSE(dev->cmd->code));
 612}
 613
 614static void port100_recv_response(struct urb *urb)
 615{
 616        struct port100 *dev = urb->context;
 617        struct port100_cmd *cmd = dev->cmd;
 618        u8 *in_frame;
 619
 620        cmd->status = urb->status;
 621
 622        switch (urb->status) {
 623        case 0:
 624                break; /* success */
 625        case -ECONNRESET:
 626        case -ENOENT:
 627                nfc_err(&dev->interface->dev,
 628                        "The urb has been canceled (status %d)\n", urb->status);
 629                goto sched_wq;
 630        case -ESHUTDOWN:
 631        default:
 632                nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 633                        urb->status);
 634                goto sched_wq;
 635        }
 636
 637        in_frame = dev->in_urb->transfer_buffer;
 638
 639        if (!port100_rx_frame_is_valid(in_frame)) {
 640                nfc_err(&dev->interface->dev, "Received an invalid frame\n");
 641                cmd->status = -EIO;
 642                goto sched_wq;
 643        }
 644
 645        print_hex_dump_debug("PORT100 RX: ", DUMP_PREFIX_NONE, 16, 1, in_frame,
 646                             port100_rx_frame_size(in_frame), false);
 647
 648        if (!port100_rx_frame_is_cmd_response(dev, in_frame)) {
 649                nfc_err(&dev->interface->dev,
 650                        "It's not the response to the last command\n");
 651                cmd->status = -EIO;
 652                goto sched_wq;
 653        }
 654
 655sched_wq:
 656        schedule_work(&dev->cmd_complete_work);
 657}
 658
 659static int port100_submit_urb_for_response(const struct port100 *dev,
 660                                           gfp_t flags)
 661{
 662        dev->in_urb->complete = port100_recv_response;
 663
 664        return usb_submit_urb(dev->in_urb, flags);
 665}
 666
 667static void port100_recv_ack(struct urb *urb)
 668{
 669        struct port100 *dev = urb->context;
 670        struct port100_cmd *cmd = dev->cmd;
 671        const struct port100_ack_frame *in_frame;
 672        int rc;
 673
 674        cmd->status = urb->status;
 675
 676        switch (urb->status) {
 677        case 0:
 678                break; /* success */
 679        case -ECONNRESET:
 680        case -ENOENT:
 681                nfc_err(&dev->interface->dev,
 682                        "The urb has been stopped (status %d)\n", urb->status);
 683                goto sched_wq;
 684        case -ESHUTDOWN:
 685        default:
 686                nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 687                        urb->status);
 688                goto sched_wq;
 689        }
 690
 691        in_frame = dev->in_urb->transfer_buffer;
 692
 693        if (!port100_rx_frame_is_ack(in_frame)) {
 694                nfc_err(&dev->interface->dev, "Received an invalid ack\n");
 695                cmd->status = -EIO;
 696                goto sched_wq;
 697        }
 698
 699        rc = port100_submit_urb_for_response(dev, GFP_ATOMIC);
 700        if (rc) {
 701                nfc_err(&dev->interface->dev,
 702                        "usb_submit_urb failed with result %d\n", rc);
 703                cmd->status = rc;
 704                goto sched_wq;
 705        }
 706
 707        return;
 708
 709sched_wq:
 710        schedule_work(&dev->cmd_complete_work);
 711}
 712
 713static int port100_submit_urb_for_ack(const struct port100 *dev, gfp_t flags)
 714{
 715        dev->in_urb->complete = port100_recv_ack;
 716
 717        return usb_submit_urb(dev->in_urb, flags);
 718}
 719
 720static int port100_send_ack(struct port100 *dev)
 721{
 722        int rc = 0;
 723
 724        mutex_lock(&dev->out_urb_lock);
 725
 726        /*
 727         * If prior cancel is in-flight (dev->cmd_cancel == true), we
 728         * can skip to send cancel. Then this will wait the prior
 729         * cancel, or merged into the next cancel rarely if next
 730         * cancel was started before waiting done. In any case, this
 731         * will be waked up soon or later.
 732         */
 733        if (!dev->cmd_cancel) {
 734                reinit_completion(&dev->cmd_cancel_done);
 735
 736                usb_kill_urb(dev->out_urb);
 737
 738                dev->out_urb->transfer_buffer = ack_frame;
 739                dev->out_urb->transfer_buffer_length = sizeof(ack_frame);
 740                rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
 741
 742                /*
 743                 * Set the cmd_cancel flag only if the URB has been
 744                 * successfully submitted. It will be reset by the out
 745                 * URB completion callback port100_send_complete().
 746                 */
 747                dev->cmd_cancel = !rc;
 748        }
 749
 750        mutex_unlock(&dev->out_urb_lock);
 751
 752        if (!rc)
 753                wait_for_completion(&dev->cmd_cancel_done);
 754
 755        return rc;
 756}
 757
 758static int port100_send_frame_async(struct port100 *dev,
 759                                    const struct sk_buff *out,
 760                                    const struct sk_buff *in, int in_len)
 761{
 762        int rc;
 763
 764        mutex_lock(&dev->out_urb_lock);
 765
 766        /* A command cancel frame as been sent through dev->out_urb. Don't try
 767         * to submit a new one.
 768         */
 769        if (dev->cmd_cancel) {
 770                rc = -EAGAIN;
 771                goto exit;
 772        }
 773
 774        dev->out_urb->transfer_buffer = out->data;
 775        dev->out_urb->transfer_buffer_length = out->len;
 776
 777        dev->in_urb->transfer_buffer = in->data;
 778        dev->in_urb->transfer_buffer_length = in_len;
 779
 780        print_hex_dump_debug("PORT100 TX: ", DUMP_PREFIX_NONE, 16, 1,
 781                             out->data, out->len, false);
 782
 783        rc = usb_submit_urb(dev->out_urb, GFP_KERNEL);
 784        if (rc)
 785                goto exit;
 786
 787        rc = port100_submit_urb_for_ack(dev, GFP_KERNEL);
 788        if (rc)
 789                usb_kill_urb(dev->out_urb);
 790
 791exit:
 792        mutex_unlock(&dev->out_urb_lock);
 793
 794        return rc;
 795}
 796
 797static void port100_build_cmd_frame(struct port100 *dev, u8 cmd_code,
 798                                    struct sk_buff *skb)
 799{
 800        /* payload is already there, just update datalen */
 801        int payload_len = skb->len;
 802
 803        skb_push(skb, PORT100_FRAME_HEADER_LEN);
 804        skb_put(skb, PORT100_FRAME_TAIL_LEN);
 805
 806        port100_tx_frame_init(skb->data, cmd_code);
 807        port100_tx_update_payload_len(skb->data, payload_len);
 808        port100_tx_frame_finish(skb->data);
 809}
 810
 811static void port100_send_async_complete(struct port100 *dev)
 812{
 813        struct port100_cmd *cmd = dev->cmd;
 814        int status = cmd->status;
 815
 816        struct sk_buff *req = cmd->req;
 817        struct sk_buff *resp = cmd->resp;
 818
 819        dev_kfree_skb(req);
 820
 821        dev->cmd = NULL;
 822
 823        if (status < 0) {
 824                cmd->complete_cb(dev, cmd->complete_cb_context,
 825                                 ERR_PTR(status));
 826                dev_kfree_skb(resp);
 827                goto done;
 828        }
 829
 830        skb_put(resp, port100_rx_frame_size(resp->data));
 831        skb_pull(resp, PORT100_FRAME_HEADER_LEN);
 832        skb_trim(resp, resp->len - PORT100_FRAME_TAIL_LEN);
 833
 834        cmd->complete_cb(dev, cmd->complete_cb_context, resp);
 835
 836done:
 837        kfree(cmd);
 838}
 839
 840static int port100_send_cmd_async(struct port100 *dev, u8 cmd_code,
 841                                struct sk_buff *req,
 842                                port100_send_async_complete_t complete_cb,
 843                                void *complete_cb_context)
 844{
 845        struct port100_cmd *cmd;
 846        struct sk_buff *resp;
 847        int rc;
 848        int  resp_len = PORT100_FRAME_HEADER_LEN +
 849                        PORT100_FRAME_MAX_PAYLOAD_LEN +
 850                        PORT100_FRAME_TAIL_LEN;
 851
 852        if (dev->cmd) {
 853                nfc_err(&dev->interface->dev,
 854                        "A command is still in process\n");
 855                return -EBUSY;
 856        }
 857
 858        resp = alloc_skb(resp_len, GFP_KERNEL);
 859        if (!resp)
 860                return -ENOMEM;
 861
 862        cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
 863        if (!cmd) {
 864                dev_kfree_skb(resp);
 865                return -ENOMEM;
 866        }
 867
 868        cmd->code = cmd_code;
 869        cmd->req = req;
 870        cmd->resp = resp;
 871        cmd->resp_len = resp_len;
 872        cmd->complete_cb = complete_cb;
 873        cmd->complete_cb_context = complete_cb_context;
 874
 875        port100_build_cmd_frame(dev, cmd_code, req);
 876
 877        dev->cmd = cmd;
 878
 879        rc = port100_send_frame_async(dev, req, resp, resp_len);
 880        if (rc) {
 881                kfree(cmd);
 882                dev_kfree_skb(resp);
 883                dev->cmd = NULL;
 884        }
 885
 886        return rc;
 887}
 888
 889struct port100_sync_cmd_response {
 890        struct sk_buff *resp;
 891        struct completion done;
 892};
 893
 894static void port100_wq_cmd_complete(struct work_struct *work)
 895{
 896        struct port100 *dev = container_of(work, struct port100,
 897                                           cmd_complete_work);
 898
 899        port100_send_async_complete(dev);
 900}
 901
 902static void port100_send_sync_complete(struct port100 *dev, void *_arg,
 903                                      struct sk_buff *resp)
 904{
 905        struct port100_sync_cmd_response *arg = _arg;
 906
 907        arg->resp = resp;
 908        complete(&arg->done);
 909}
 910
 911static struct sk_buff *port100_send_cmd_sync(struct port100 *dev, u8 cmd_code,
 912                                             struct sk_buff *req)
 913{
 914        int rc;
 915        struct port100_sync_cmd_response arg;
 916
 917        init_completion(&arg.done);
 918
 919        rc = port100_send_cmd_async(dev, cmd_code, req,
 920                                    port100_send_sync_complete, &arg);
 921        if (rc) {
 922                dev_kfree_skb(req);
 923                return ERR_PTR(rc);
 924        }
 925
 926        wait_for_completion(&arg.done);
 927
 928        return arg.resp;
 929}
 930
 931static void port100_send_complete(struct urb *urb)
 932{
 933        struct port100 *dev = urb->context;
 934
 935        if (dev->cmd_cancel) {
 936                complete_all(&dev->cmd_cancel_done);
 937                dev->cmd_cancel = false;
 938        }
 939
 940        switch (urb->status) {
 941        case 0:
 942                break; /* success */
 943        case -ECONNRESET:
 944        case -ENOENT:
 945                nfc_err(&dev->interface->dev,
 946                        "The urb has been stopped (status %d)\n", urb->status);
 947                break;
 948        case -ESHUTDOWN:
 949        default:
 950                nfc_err(&dev->interface->dev, "Urb failure (status %d)\n",
 951                        urb->status);
 952        }
 953}
 954
 955static void port100_abort_cmd(struct nfc_digital_dev *ddev)
 956{
 957        struct port100 *dev = nfc_digital_get_drvdata(ddev);
 958
 959        /* An ack will cancel the last issued command */
 960        port100_send_ack(dev);
 961
 962        /* cancel the urb request */
 963        usb_kill_urb(dev->in_urb);
 964}
 965
 966static struct sk_buff *port100_alloc_skb(const struct port100 *dev, unsigned int size)
 967{
 968        struct sk_buff *skb;
 969
 970        skb = alloc_skb(dev->skb_headroom + dev->skb_tailroom + size,
 971                        GFP_KERNEL);
 972        if (skb)
 973                skb_reserve(skb, dev->skb_headroom);
 974
 975        return skb;
 976}
 977
 978static int port100_set_command_type(struct port100 *dev, u8 command_type)
 979{
 980        struct sk_buff *skb;
 981        struct sk_buff *resp;
 982        int rc;
 983
 984        skb = port100_alloc_skb(dev, 1);
 985        if (!skb)
 986                return -ENOMEM;
 987
 988        skb_put_u8(skb, command_type);
 989
 990        resp = port100_send_cmd_sync(dev, PORT100_CMD_SET_COMMAND_TYPE, skb);
 991        if (IS_ERR(resp))
 992                return PTR_ERR(resp);
 993
 994        rc = resp->data[0];
 995
 996        dev_kfree_skb(resp);
 997
 998        return rc;
 999}
1000
1001static u64 port100_get_command_type_mask(struct port100 *dev)
1002{
1003        struct sk_buff *skb;
1004        struct sk_buff *resp;
1005        u64 mask;
1006
1007        skb = port100_alloc_skb(dev, 0);
1008        if (!skb)
1009                return 0;
1010
1011        resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_COMMAND_TYPE, skb);
1012        if (IS_ERR(resp))
1013                return 0;
1014
1015        if (resp->len < 8)
1016                mask = 0;
1017        else
1018                mask = be64_to_cpu(*(__be64 *)resp->data);
1019
1020        dev_kfree_skb(resp);
1021
1022        return mask;
1023}
1024
1025static u16 port100_get_firmware_version(struct port100 *dev)
1026{
1027        struct sk_buff *skb;
1028        struct sk_buff *resp;
1029        u16 fw_ver;
1030
1031        skb = port100_alloc_skb(dev, 0);
1032        if (!skb)
1033                return 0;
1034
1035        resp = port100_send_cmd_sync(dev, PORT100_CMD_GET_FIRMWARE_VERSION,
1036                                     skb);
1037        if (IS_ERR(resp))
1038                return 0;
1039
1040        fw_ver = le16_to_cpu(*(__le16 *)resp->data);
1041
1042        dev_kfree_skb(resp);
1043
1044        return fw_ver;
1045}
1046
1047static int port100_switch_rf(struct nfc_digital_dev *ddev, bool on)
1048{
1049        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1050        struct sk_buff *skb, *resp;
1051
1052        skb = port100_alloc_skb(dev, 1);
1053        if (!skb)
1054                return -ENOMEM;
1055
1056        skb_put_u8(skb, on ? 1 : 0);
1057
1058        /* Cancel the last command if the device is being switched off */
1059        if (!on)
1060                port100_abort_cmd(ddev);
1061
1062        resp = port100_send_cmd_sync(dev, PORT100_CMD_SWITCH_RF, skb);
1063
1064        if (IS_ERR(resp))
1065                return PTR_ERR(resp);
1066
1067        dev_kfree_skb(resp);
1068
1069        return 0;
1070}
1071
1072static int port100_in_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1073{
1074        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1075        struct sk_buff *skb;
1076        struct sk_buff *resp;
1077        int rc;
1078
1079        if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1080                return -EINVAL;
1081
1082        skb = port100_alloc_skb(dev, sizeof(struct port100_in_rf_setting));
1083        if (!skb)
1084                return -ENOMEM;
1085
1086        skb_put_data(skb, &in_rf_settings[rf],
1087                     sizeof(struct port100_in_rf_setting));
1088
1089        resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_RF, skb);
1090
1091        if (IS_ERR(resp))
1092                return PTR_ERR(resp);
1093
1094        rc = resp->data[0];
1095
1096        dev_kfree_skb(resp);
1097
1098        return rc;
1099}
1100
1101static int port100_in_set_framing(struct nfc_digital_dev *ddev, int param)
1102{
1103        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1104        const struct port100_protocol *protocols;
1105        struct sk_buff *skb;
1106        struct sk_buff *resp;
1107        int num_protocols;
1108        size_t size;
1109        int rc;
1110
1111        if (param >= NFC_DIGITAL_FRAMING_LAST)
1112                return -EINVAL;
1113
1114        protocols = in_protocols[param];
1115
1116        num_protocols = 0;
1117        while (protocols[num_protocols].number != PORT100_IN_PROT_END)
1118                num_protocols++;
1119
1120        if (!num_protocols)
1121                return 0;
1122
1123        size = sizeof(struct port100_protocol) * num_protocols;
1124
1125        skb = port100_alloc_skb(dev, size);
1126        if (!skb)
1127                return -ENOMEM;
1128
1129        skb_put_data(skb, protocols, size);
1130
1131        resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_PROTOCOL, skb);
1132
1133        if (IS_ERR(resp))
1134                return PTR_ERR(resp);
1135
1136        rc = resp->data[0];
1137
1138        dev_kfree_skb(resp);
1139
1140        return rc;
1141}
1142
1143static int port100_in_configure_hw(struct nfc_digital_dev *ddev, int type,
1144                                   int param)
1145{
1146        if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1147                return port100_in_set_rf(ddev, param);
1148
1149        if (type == NFC_DIGITAL_CONFIG_FRAMING)
1150                return port100_in_set_framing(ddev, param);
1151
1152        return -EINVAL;
1153}
1154
1155static void port100_in_comm_rf_complete(struct port100 *dev, void *arg,
1156                                       struct sk_buff *resp)
1157{
1158        const struct port100_cb_arg *cb_arg = arg;
1159        nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1160        u32 status;
1161        int rc;
1162
1163        if (IS_ERR(resp)) {
1164                rc =  PTR_ERR(resp);
1165                goto exit;
1166        }
1167
1168        if (resp->len < 4) {
1169                nfc_err(&dev->interface->dev,
1170                        "Invalid packet length received\n");
1171                rc = -EIO;
1172                goto error;
1173        }
1174
1175        status = le32_to_cpu(*(__le32 *)resp->data);
1176
1177        skb_pull(resp, sizeof(u32));
1178
1179        if (status == PORT100_CMD_STATUS_TIMEOUT) {
1180                rc = -ETIMEDOUT;
1181                goto error;
1182        }
1183
1184        if (status != PORT100_CMD_STATUS_OK) {
1185                nfc_err(&dev->interface->dev,
1186                        "in_comm_rf failed with status 0x%08x\n", status);
1187                rc = -EIO;
1188                goto error;
1189        }
1190
1191        /* Remove collision bits byte */
1192        skb_pull(resp, 1);
1193
1194        goto exit;
1195
1196error:
1197        kfree_skb(resp);
1198        resp = ERR_PTR(rc);
1199
1200exit:
1201        cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1202
1203        kfree(cb_arg);
1204}
1205
1206static int port100_in_send_cmd(struct nfc_digital_dev *ddev,
1207                               struct sk_buff *skb, u16 _timeout,
1208                               nfc_digital_cmd_complete_t cb, void *arg)
1209{
1210        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1211        struct port100_cb_arg *cb_arg;
1212        __le16 timeout;
1213
1214        cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1215        if (!cb_arg)
1216                return -ENOMEM;
1217
1218        cb_arg->complete_cb = cb;
1219        cb_arg->complete_arg = arg;
1220
1221        timeout = cpu_to_le16(_timeout * 10);
1222
1223        memcpy(skb_push(skb, sizeof(__le16)), &timeout, sizeof(__le16));
1224
1225        return port100_send_cmd_async(dev, PORT100_CMD_IN_COMM_RF, skb,
1226                                      port100_in_comm_rf_complete, cb_arg);
1227}
1228
1229static int port100_tg_set_rf(struct nfc_digital_dev *ddev, u8 rf)
1230{
1231        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1232        struct sk_buff *skb;
1233        struct sk_buff *resp;
1234        int rc;
1235
1236        if (rf >= NFC_DIGITAL_RF_TECH_LAST)
1237                return -EINVAL;
1238
1239        skb = port100_alloc_skb(dev, sizeof(struct port100_tg_rf_setting));
1240        if (!skb)
1241                return -ENOMEM;
1242
1243        skb_put_data(skb, &tg_rf_settings[rf],
1244                     sizeof(struct port100_tg_rf_setting));
1245
1246        resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_RF, skb);
1247
1248        if (IS_ERR(resp))
1249                return PTR_ERR(resp);
1250
1251        rc = resp->data[0];
1252
1253        dev_kfree_skb(resp);
1254
1255        return rc;
1256}
1257
1258static int port100_tg_set_framing(struct nfc_digital_dev *ddev, int param)
1259{
1260        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1261        const struct port100_protocol *protocols;
1262        struct sk_buff *skb;
1263        struct sk_buff *resp;
1264        int rc;
1265        int num_protocols;
1266        size_t size;
1267
1268        if (param >= NFC_DIGITAL_FRAMING_LAST)
1269                return -EINVAL;
1270
1271        protocols = tg_protocols[param];
1272
1273        num_protocols = 0;
1274        while (protocols[num_protocols].number != PORT100_TG_PROT_END)
1275                num_protocols++;
1276
1277        if (!num_protocols)
1278                return 0;
1279
1280        size = sizeof(struct port100_protocol) * num_protocols;
1281
1282        skb = port100_alloc_skb(dev, size);
1283        if (!skb)
1284                return -ENOMEM;
1285
1286        skb_put_data(skb, protocols, size);
1287
1288        resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_PROTOCOL, skb);
1289
1290        if (IS_ERR(resp))
1291                return PTR_ERR(resp);
1292
1293        rc = resp->data[0];
1294
1295        dev_kfree_skb(resp);
1296
1297        return rc;
1298}
1299
1300static int port100_tg_configure_hw(struct nfc_digital_dev *ddev, int type,
1301                                   int param)
1302{
1303        if (type == NFC_DIGITAL_CONFIG_RF_TECH)
1304                return port100_tg_set_rf(ddev, param);
1305
1306        if (type == NFC_DIGITAL_CONFIG_FRAMING)
1307                return port100_tg_set_framing(ddev, param);
1308
1309        return -EINVAL;
1310}
1311
1312static bool port100_tg_target_activated(struct port100 *dev, u8 tgt_activated)
1313{
1314        u8 mask;
1315
1316        switch (dev->cmd_type) {
1317        case PORT100_CMD_TYPE_0:
1318                mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK;
1319                break;
1320        case PORT100_CMD_TYPE_1:
1321                mask = PORT100_MDAA_TGT_HAS_BEEN_ACTIVATED_MASK |
1322                       PORT100_MDAA_TGT_WAS_ACTIVATED_MASK;
1323                break;
1324        default:
1325                nfc_err(&dev->interface->dev, "Unknown command type\n");
1326                return false;
1327        }
1328
1329        return ((tgt_activated & mask) == mask);
1330}
1331
1332static void port100_tg_comm_rf_complete(struct port100 *dev, void *arg,
1333                                        struct sk_buff *resp)
1334{
1335        u32 status;
1336        const struct port100_cb_arg *cb_arg = arg;
1337        nfc_digital_cmd_complete_t cb = cb_arg->complete_cb;
1338        struct port100_tg_comm_rf_res *hdr;
1339
1340        if (IS_ERR(resp))
1341                goto exit;
1342
1343        hdr = (struct port100_tg_comm_rf_res *)resp->data;
1344
1345        status = le32_to_cpu(hdr->status);
1346
1347        if (cb_arg->mdaa &&
1348            !port100_tg_target_activated(dev, hdr->target_activated)) {
1349                kfree_skb(resp);
1350                resp = ERR_PTR(-ETIMEDOUT);
1351
1352                goto exit;
1353        }
1354
1355        skb_pull(resp, sizeof(struct port100_tg_comm_rf_res));
1356
1357        if (status != PORT100_CMD_STATUS_OK) {
1358                kfree_skb(resp);
1359
1360                if (status == PORT100_CMD_STATUS_TIMEOUT)
1361                        resp = ERR_PTR(-ETIMEDOUT);
1362                else
1363                        resp = ERR_PTR(-EIO);
1364        }
1365
1366exit:
1367        cb(dev->nfc_digital_dev, cb_arg->complete_arg, resp);
1368
1369        kfree(cb_arg);
1370}
1371
1372static int port100_tg_send_cmd(struct nfc_digital_dev *ddev,
1373                               struct sk_buff *skb, u16 timeout,
1374                               nfc_digital_cmd_complete_t cb, void *arg)
1375{
1376        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1377        struct port100_tg_comm_rf_cmd *hdr;
1378        struct port100_cb_arg *cb_arg;
1379
1380        cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1381        if (!cb_arg)
1382                return -ENOMEM;
1383
1384        cb_arg->complete_cb = cb;
1385        cb_arg->complete_arg = arg;
1386
1387        skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1388
1389        hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1390
1391        memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1392        hdr->guard_time = cpu_to_le16(500);
1393        hdr->send_timeout = cpu_to_le16(0xFFFF);
1394        hdr->recv_timeout = cpu_to_le16(timeout);
1395
1396        return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1397                                      port100_tg_comm_rf_complete, cb_arg);
1398}
1399
1400static int port100_listen_mdaa(struct nfc_digital_dev *ddev,
1401                               struct digital_tg_mdaa_params *params,
1402                               u16 timeout,
1403                               nfc_digital_cmd_complete_t cb, void *arg)
1404{
1405        struct port100 *dev = nfc_digital_get_drvdata(ddev);
1406        struct port100_tg_comm_rf_cmd *hdr;
1407        struct port100_cb_arg *cb_arg;
1408        struct sk_buff *skb;
1409        int rc;
1410
1411        rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_RF_TECH,
1412                                     NFC_DIGITAL_RF_TECH_106A);
1413        if (rc)
1414                return rc;
1415
1416        rc = port100_tg_configure_hw(ddev, NFC_DIGITAL_CONFIG_FRAMING,
1417                                     NFC_DIGITAL_FRAMING_NFCA_NFC_DEP);
1418        if (rc)
1419                return rc;
1420
1421        cb_arg = kzalloc(sizeof(struct port100_cb_arg), GFP_KERNEL);
1422        if (!cb_arg)
1423                return -ENOMEM;
1424
1425        cb_arg->complete_cb = cb;
1426        cb_arg->complete_arg = arg;
1427        cb_arg->mdaa = 1;
1428
1429        skb = port100_alloc_skb(dev, 0);
1430        if (!skb) {
1431                kfree(cb_arg);
1432                return -ENOMEM;
1433        }
1434
1435        skb_push(skb, sizeof(struct port100_tg_comm_rf_cmd));
1436        hdr = (struct port100_tg_comm_rf_cmd *)skb->data;
1437
1438        memset(hdr, 0, sizeof(struct port100_tg_comm_rf_cmd));
1439
1440        hdr->guard_time = 0;
1441        hdr->send_timeout = cpu_to_le16(0xFFFF);
1442        hdr->mdaa = 1;
1443        hdr->nfca_param[0] = (params->sens_res >> 8) & 0xFF;
1444        hdr->nfca_param[1] = params->sens_res & 0xFF;
1445        memcpy(hdr->nfca_param + 2, params->nfcid1, 3);
1446        hdr->nfca_param[5] = params->sel_res;
1447        memcpy(hdr->nfcf_param, params->nfcid2, 8);
1448        hdr->nfcf_param[16] = (params->sc >> 8) & 0xFF;
1449        hdr->nfcf_param[17] = params->sc & 0xFF;
1450        hdr->recv_timeout = cpu_to_le16(timeout);
1451
1452        return port100_send_cmd_async(dev, PORT100_CMD_TG_COMM_RF, skb,
1453                                      port100_tg_comm_rf_complete, cb_arg);
1454}
1455
1456static int port100_listen(struct nfc_digital_dev *ddev, u16 timeout,
1457                          nfc_digital_cmd_complete_t cb, void *arg)
1458{
1459        const struct port100 *dev = nfc_digital_get_drvdata(ddev);
1460        struct sk_buff *skb;
1461
1462        skb = port100_alloc_skb(dev, 0);
1463        if (!skb)
1464                return -ENOMEM;
1465
1466        return port100_tg_send_cmd(ddev, skb, timeout, cb, arg);
1467}
1468
1469static const struct nfc_digital_ops port100_digital_ops = {
1470        .in_configure_hw = port100_in_configure_hw,
1471        .in_send_cmd = port100_in_send_cmd,
1472
1473        .tg_listen_mdaa = port100_listen_mdaa,
1474        .tg_listen = port100_listen,
1475        .tg_configure_hw = port100_tg_configure_hw,
1476        .tg_send_cmd = port100_tg_send_cmd,
1477
1478        .switch_rf = port100_switch_rf,
1479        .abort_cmd = port100_abort_cmd,
1480};
1481
1482static const struct usb_device_id port100_table[] = {
1483        { USB_DEVICE(SONY_VENDOR_ID, RCS380S_PRODUCT_ID), },
1484        { USB_DEVICE(SONY_VENDOR_ID, RCS380P_PRODUCT_ID), },
1485        { }
1486};
1487MODULE_DEVICE_TABLE(usb, port100_table);
1488
1489static int port100_probe(struct usb_interface *interface,
1490                         const struct usb_device_id *id)
1491{
1492        struct port100 *dev;
1493        int rc;
1494        struct usb_host_interface *iface_desc;
1495        struct usb_endpoint_descriptor *endpoint;
1496        int in_endpoint;
1497        int out_endpoint;
1498        u16 fw_version;
1499        u64 cmd_type_mask;
1500        int i;
1501
1502        dev = devm_kzalloc(&interface->dev, sizeof(struct port100), GFP_KERNEL);
1503        if (!dev)
1504                return -ENOMEM;
1505
1506        mutex_init(&dev->out_urb_lock);
1507        dev->udev = usb_get_dev(interface_to_usbdev(interface));
1508        dev->interface = interface;
1509        usb_set_intfdata(interface, dev);
1510
1511        in_endpoint = out_endpoint = 0;
1512        iface_desc = interface->cur_altsetting;
1513        for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
1514                endpoint = &iface_desc->endpoint[i].desc;
1515
1516                if (!in_endpoint && usb_endpoint_is_bulk_in(endpoint))
1517                        in_endpoint = endpoint->bEndpointAddress;
1518
1519                if (!out_endpoint && usb_endpoint_is_bulk_out(endpoint))
1520                        out_endpoint = endpoint->bEndpointAddress;
1521        }
1522
1523        if (!in_endpoint || !out_endpoint) {
1524                nfc_err(&interface->dev,
1525                        "Could not find bulk-in or bulk-out endpoint\n");
1526                rc = -ENODEV;
1527                goto error;
1528        }
1529
1530        dev->in_urb = usb_alloc_urb(0, GFP_KERNEL);
1531        dev->out_urb = usb_alloc_urb(0, GFP_KERNEL);
1532
1533        if (!dev->in_urb || !dev->out_urb) {
1534                nfc_err(&interface->dev, "Could not allocate USB URBs\n");
1535                rc = -ENOMEM;
1536                goto error;
1537        }
1538
1539        usb_fill_bulk_urb(dev->in_urb, dev->udev,
1540                          usb_rcvbulkpipe(dev->udev, in_endpoint),
1541                          NULL, 0, NULL, dev);
1542        usb_fill_bulk_urb(dev->out_urb, dev->udev,
1543                          usb_sndbulkpipe(dev->udev, out_endpoint),
1544                          NULL, 0, port100_send_complete, dev);
1545        dev->out_urb->transfer_flags = URB_ZERO_PACKET;
1546
1547        dev->skb_headroom = PORT100_FRAME_HEADER_LEN +
1548                            PORT100_COMM_RF_HEAD_MAX_LEN;
1549        dev->skb_tailroom = PORT100_FRAME_TAIL_LEN;
1550
1551        init_completion(&dev->cmd_cancel_done);
1552        INIT_WORK(&dev->cmd_complete_work, port100_wq_cmd_complete);
1553
1554        /* The first thing to do with the Port-100 is to set the command type
1555         * to be used. If supported we use command type 1. 0 otherwise.
1556         */
1557        cmd_type_mask = port100_get_command_type_mask(dev);
1558        if (!cmd_type_mask) {
1559                nfc_err(&interface->dev,
1560                        "Could not get supported command types\n");
1561                rc = -ENODEV;
1562                goto error;
1563        }
1564
1565        if (PORT100_CMD_TYPE_IS_SUPPORTED(cmd_type_mask, PORT100_CMD_TYPE_1))
1566                dev->cmd_type = PORT100_CMD_TYPE_1;
1567        else
1568                dev->cmd_type = PORT100_CMD_TYPE_0;
1569
1570        rc = port100_set_command_type(dev, dev->cmd_type);
1571        if (rc) {
1572                nfc_err(&interface->dev,
1573                        "The device does not support command type %u\n",
1574                        dev->cmd_type);
1575                goto error;
1576        }
1577
1578        fw_version = port100_get_firmware_version(dev);
1579        if (!fw_version)
1580                nfc_err(&interface->dev,
1581                        "Could not get device firmware version\n");
1582
1583        nfc_info(&interface->dev,
1584                 "Sony NFC Port-100 Series attached (firmware v%x.%02x)\n",
1585                 (fw_version & 0xFF00) >> 8, fw_version & 0xFF);
1586
1587        dev->nfc_digital_dev = nfc_digital_allocate_device(&port100_digital_ops,
1588                                                           PORT100_PROTOCOLS,
1589                                                           PORT100_CAPABILITIES,
1590                                                           dev->skb_headroom,
1591                                                           dev->skb_tailroom);
1592        if (!dev->nfc_digital_dev) {
1593                nfc_err(&interface->dev,
1594                        "Could not allocate nfc_digital_dev\n");
1595                rc = -ENOMEM;
1596                goto error;
1597        }
1598
1599        nfc_digital_set_parent_dev(dev->nfc_digital_dev, &interface->dev);
1600        nfc_digital_set_drvdata(dev->nfc_digital_dev, dev);
1601
1602        rc = nfc_digital_register_device(dev->nfc_digital_dev);
1603        if (rc) {
1604                nfc_err(&interface->dev,
1605                        "Could not register digital device\n");
1606                goto free_nfc_dev;
1607        }
1608
1609        return 0;
1610
1611free_nfc_dev:
1612        nfc_digital_free_device(dev->nfc_digital_dev);
1613
1614error:
1615        usb_free_urb(dev->in_urb);
1616        usb_free_urb(dev->out_urb);
1617        usb_put_dev(dev->udev);
1618
1619        return rc;
1620}
1621
1622static void port100_disconnect(struct usb_interface *interface)
1623{
1624        struct port100 *dev;
1625
1626        dev = usb_get_intfdata(interface);
1627        usb_set_intfdata(interface, NULL);
1628
1629        nfc_digital_unregister_device(dev->nfc_digital_dev);
1630        nfc_digital_free_device(dev->nfc_digital_dev);
1631
1632        usb_kill_urb(dev->in_urb);
1633        usb_kill_urb(dev->out_urb);
1634
1635        usb_free_urb(dev->in_urb);
1636        usb_free_urb(dev->out_urb);
1637        usb_put_dev(dev->udev);
1638
1639        kfree(dev->cmd);
1640
1641        nfc_info(&interface->dev, "Sony Port-100 NFC device disconnected\n");
1642}
1643
1644static struct usb_driver port100_driver = {
1645        .name =         "port100",
1646        .probe =        port100_probe,
1647        .disconnect =   port100_disconnect,
1648        .id_table =     port100_table,
1649};
1650
1651module_usb_driver(port100_driver);
1652
1653MODULE_DESCRIPTION("NFC Port-100 series usb driver ver " VERSION);
1654MODULE_VERSION(VERSION);
1655MODULE_LICENSE("GPL");
1656